Networked intoxication vehicle immobilization

ABSTRACT

A vehicle immobilization system includes a detection element operable to detect a level of an intoxicant in a user&#39;s breath. A control module is operable to receive a signal from the detection element indicating the level of intoxicant in the user&#39;s breath, and to selectively restrict operation of a vehicle based on the level of intoxicant in the user&#39;s breath exceeding a threshold. A wireless relay is operable to replace a standard relay in the vehicle, and to wirelessly communicate with the control module such that the control module is operable to control the wireless relay to selectively restrict operation of the vehicle.

This application claims the benefit of pending U.S. Nonprovisionalapplication Ser. No. 15/223,921, filed Jul. 29, 2016, as a continuation,which claims the benefit of U.S. Provisional Application No. 62/240,978,filed Oct. 13, 2015, U.S. Provisional Application No. 62/266,279, filedDec. 11, 2015 and U.S. Provisional Application No. 62/306,177, filedMar. 10, 2016, the contents of which are herein incorporated byreference.

FIELD

The invention relates generally to vehicle immobilization in response tointoxication of a driver, and more specifically to networked vehicleintoxication immobilization.

BACKGROUND

Vehicles incorporate breath alcohol ignition interlock devices,sometimes abbreviated as BAIIDs, to prevent a driver with a knownhistory of driving while intoxicated with alcohol from operating thevehicle while intoxicated. Such devices are designed to prevent a driverfrom starting a motor vehicle when the driver's breath alcoholconcentration (BAC) is at or above a set alcohol concentration. Eachstate in the U.S. has adopted a law providing for use of such BAIIDdevices as a sanction for drivers convicted of driving whileintoxicated, or as a condition of restoring some driving privilegesafter such offenses.

A typical BAIID device meets guidelines established by the NationalHighway Traffic Safety Administration (NHTSA) in published modelspecifications for BAIIDs, which specify various features and safeguardsthat should be present in such a device to make it an effective andreliable deterrent to intoxicated driving. For example, the modelspecifies a volume of air in a breath that the driver provides to ensurethat an adequate volume of air to ensure an accurate result is provided,and specifies how such a device should be installed into a vehicle toprevent the vehicle from operating pending a determination that thedriver is not intoxicated. Most state programs and manufacturer BAIIDproducts adhere to the NHTSA model guidelines, providing a uniformmarket for various brands of BAIID products.

In operation, a driver must use a BAIID device by blowing into analcohol-sensing element such as a fuel cell that measures the amount ofalcohol in the driver's breath, thereby providing a reliable estimate ofthe blood alcohol concentration in the driver's blood. The BAIID reads asignal from the fuel cell or other alcohol-sensing element, anddetermines whether the driver's blood alcohol content exceeds athreshold amount. If the driver's blood alcohol content does not exceedthe threshold, the driver is determined not to be intoxicated and theBAIID allows the vehicle to start and run by electrically enabling asystem within the vehicle, such as the starter, fuel pump, ignition, orthe like. If the driver is intoxicated, the vehicle is not allowed tostart, and the BAIID device records a violation.

The BAIID system is installed in the driver's vehicle as a consequenceof a previous conviction for driving while intoxicated, as a conditionof having some driving privileges restored. Because the security andintegrity of the BAIID is important to ensuring compliance from theconvicted intoxicated driver and to ensuring safety of others on theroad, the system design and installation are desirably configured tomake circumventing the BAIID to operate the vehicle while intoxicatedboth readily detectable and somewhat difficult. This is achieved in mostsystems by hard-wiring the BAIID system into the car's electricalsystem, including various connections to disable the vehicle's starter,fuel pump, ignition, or other elements critical to the vehicle'soperation, and by connecting the BAIID such that it can monitor thecar's operation to ensure that unauthorized operation is not takingplace.

Installation therefore typically involves wiring multiple connectionsfrom the BAIID device in the passenger compartment of a car to variouselectrical systems within the car, such as a starter or fuel pump in theengine compartment, and speed sensor or mileage sensor connections inthe car's dashboard. This usually requires removing at least part of thedashboard, routing wires through the firewall into the enginecompartment, and connecting wires to various electrical systemcomponents in the vehicle's dashboard systems. Further, installationvaries significantly by type of vehicle, making the installation processmore difficult and time-consuming. This results in significant cost toperform such an installation, and typically results in permanent damageto the vehicle such as where holes are cut in the vehicle to run wires,wires are cut and spliced, and components of the BAIID system aremounted to the vehicle.

Because installation of BAIID devices is complex, expensive,time-consuming, and often results in permanent vehicle damage, it isdesirable to provide an effective BAIID system with simpler and lessintrusive installation.

SUMMARY

One example embodiment comprises a vehicle immobilization system,including a detection element operable to detect a level of anintoxicant in a user's breath. A control module is operable to receive asignal from the detection element indicating the level of intoxicant inthe user's breath, and to selectively restrict operation of a vehiclebased on the level of intoxicant in the user's breath exceeding athreshold. A relay is operable to replace a relay in the vehicle, and towirelessly communicate with the control module such that the controlmodule is operable to control the relay to selectively restrictoperation of the vehicle.

In a further example, the relay is operable to communicate with thecontrol module via a bidirectional Bluetooth wireless connection, and tocontrol operation of at least one of a fuel pump, a starter motor, agovernor, or an ignition of the vehicle.

In another example, the relay is operable to communicate its state tothe control module, and the relay is operable to selectively restrictoperation of the vehicle if it is not in communication with the controlmodule.

In another example, a vehicle immobilization system includes a detectionelement operable to detect a level of an intoxicant in a user's breath,and a control module operable to receive a signal from the detectionelement indicating the level of intoxicant in the user's breath. Thecontrol module is also operable to selectively restrict operation of thevehicle based on the level of intoxicant in the user's breath exceedinga threshold. The control module achieves this in various examples byselectively disrupting at least one communications bus within thevehicle via a connection between the control module and thecommunications bus using an Onboard Diagnostic (OBD) port of the vehicleto selectively restrict operation of the vehicle, or by selectivelyoverwriting at least a portion of a firmware within the vehicle via aconnection between the control module and the communications bus usingan Onboard Diagnostic (OBD) port of the vehicle to selectively restrictoperation of the vehicle.

The details of one or more examples of the invention are set forth inthe accompanying drawings and the description below. Other features andadvantages will be apparent from the description and drawings, and fromthe claims.

BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 shows a part of a vehicle interior as may be used to practicesome examples.

FIG. 2A shows a detailed example of an On-Board Diagnostic (OBDII)connector.

FIG. 2B shows a vehicle-mounted OBDII connector and a pluggable OBDIImodule.

FIG. 3 shows an example intoxication interlock system coupled to avehicle.

FIG. 4 shows an intoxication interlock system incorporating a legacyrelay box, consistent with an example.

FIG. 5A shows a detailed example of a Bluetooth relay.

FIG. 5B shows another detailed example of a Bluetooth relay.

FIG. 5C shows an alternate detailed example of a Bluetooth relay.

FIG. 6 shows a smartphone configured to function as a control module foran intoxication interlock system, consistent with an example.

FIG. 7 is a flowchart illustrating an example method of operating anintoxication interlock system.

FIG. 8 shows a computerized intoxication interlock system, as may beused to practice various examples described herein.

DETAILED DESCRIPTION

In the following detailed description of example embodiments, referenceis made to specific example embodiments by way of drawings andillustrations. These examples are described in sufficient detail toenable those skilled in the art to practice what is described, and serveto illustrate how elements of these examples may be applied to variouspurposes or embodiments. Other embodiments exist, and logical,mechanical, electrical, and other changes may be made.

Features or limitations of various embodiments described herein, howeverimportant to the example embodiments in which they are incorporated, donot limit other embodiments, and any reference to the elements,operation, and application of the examples serve only to define theseexample embodiments. Features or elements shown in various examplesdescribed herein can be combined in ways other than shown in theexamples, and any such combinations are explicitly contemplated to bewithin the scope of the examples presented here. The following detaileddescription does not, therefore, limit the scope of what is claimed.

Breath alcohol ignition interlock devices, also known as BAIIDs, arecommonly installed in vehicles to prevent a driver with a history ofdriving while intoxicated from starting a motor vehicle when thedriver's breath alcohol concentration (BAC) is at or above a set alcoholconcentration. Concentration of alcohol in a driver's breath is closelyproportional to the concentration of alcohol in the driver's blood,which is typically the basis upon which intoxication is legallydetermined. Because a driver must blow into an alcohol-sensing elementof a BAIID such as a fuel cell that measures the amount of alcohol inthe driver's breath before the BAIID enables normal car operation, theBAIID can effectively prevent intoxicated drivers from driving a vehiclewhile intoxicated by selectively disabling the vehicle based onsuccessful completion of the required BAIID test.

The BAIID system is also desirably equipped to monitor for attempts todefeat the device, such as shorting the starter wires selectivelyinterrupted by the BAIID device or otherwise enabling vehicle operationby circumventing the BAIID. This is achieved in some examples byhard-wiring the BAIID to both the starter or other vehicle element andto vehicle instrumentation to detect operation or movement of thevehicle, such that unauthorized operation of the vehicle can be detectedand recorded. The greater the amount of such vehicle information isavailable to the BAIID system, the more difficult it may be to defeatthe BAIID device without the defeat attempt being detected and recordedas a violation. Installation of such a system typically thereforeincludes hard-wiring the BAIID system into the car's electrical systemat several locations, including connections to disable the vehicle'sstarter, fuel pump, ignition, or other elements critical to thevehicle's operation, and including connecting the BAIID to vehicleinstrumentation such that it can monitor the car's operation to ensurethat unauthorized operation is not taking place.

But, connecting the BAIID device to several different systems associatedwith the engine and dash instrumentation of the vehicle typicallyinvolves routing wires from the BAIID device in the passengercompartment of a car to one or more systems within the enginecompartment such as a starter or fuel pump, and to one or moreinstrumentation systems such as the speedometer, odometer, or other suchdashboard instrumentation. Although installation can vary significantlyfrom vehicle to vehicle, a typical process therefore involvesdetermining a preferred installation plan for the particular vehicle,removing part of all of the dash, drilling a hole through the firewallto access the engine compartment, and routing and securing wiringharnesses to each system to be controlled or monitored by the BAIID. Thetime and cost to install the BAIID device therefore often runs intohundreds or thousands of dollars, and many hours' work. Further, theinstallation typically results in permanent damage to the vehicle, as itinvolves cutting holes in the vehicle to run wires, cutting and splicingwires, and attaching components of the BAIID system such as the wiringharness and a mount for the handheld detection unit to the vehicle.

Some examples described herein therefore provide for BAIID systems ordevices having improved functionality, cost, installation time,installation cost, and installation damage to the vehicle, as describedherein. This is achieved in various examples by various combinations ofvehicle monitoring and control using the vehicle's on-board diagnosticport and a wireless relay, such as by using a data link connectorcommonly referred to as an OBDII port to monitor vehicle operationaldata and/or control the vehicle's operation, and by using a wirelessrelay to control the vehicle's operation and/or monitor the state of oneor more vehicle systems.

FIG. 1 shows a portion of an interior of a vehicle as may be used topractice some examples. Here, the interior of a car 100 includes adriver's seat on the left, a front passenger seat on the right, asteering wheel, and other common elements of a typical car interior. Thevehicle further includes a standard data link connector, commonly calledan On-Board Diagnostic connector as shown at 102. A data link connectorsuch as the on On-Board Diagnostic (OBD) connector is a connector thatprovides access to a system that gives access to information about thestatus of a number of vehicle sub-systems. In other examples, the datalink connector will provide access to other vehicle systems, such asmanufacturer-proprietary vehicle systems or networks. The most recentversions of OBD connectors are standardized digital communications portsthat can provide real-time data and diagnostic information. In differentexamples, the OBD connector may be one of a variety of types, such as amultiplex OBD, an OBDI, an OBD1.5, an OBDII, or a future type of wiredor wireless OBD connector. Each of these different types of OBDconnectors comply with specific industry standards, such as those set bythe Society of Automotive Engineers (SAE).

In one more detailed example, the OBD connector is an OBDII connector,which complies with SAE standards J1962, which itself a subset ofInternational Standards Organization (ISO) standard 15031-1. The OBDIIstandard port and communications system are present on all cars sold inthe United States since 1996, and so are present on the vast majority ofvehicles currently in use. Among the specifications detailed in thestandards is a requirement that the OBDII connector 102 be locatedwithin easy reach of the driver's seat, such as within an area of thedashboard bounded by the driver's end of the dashboard to 300 mm beyondthe vehicle centerline on the dashboard, with a preferred locationbetween the steering column and vehicle centerline. The specificationalso indicates that the OBDII connector should be easy for a person toaccess from the driver's seat location, and mounted in such a way tofacilitate easy mating and un-mating of an OBDII connector on adiagnostic tool or other such connected device.

The OBDII connector therefore provides an easy and convenient interfaceto the car's electrical system from the driver's seat location in mostvehicles implementing these standards, which have been in effectstarting with 1996 model year vehicles. Various examples discussedherein will therefore use the vehicle's OBDII port to access varioussystems within the vehicle, such as to control systems such as the fuelpump or starter, or to monitor systems such as the speed or mileage ofthe vehicle. Other versions of OBD connectors will be used in otherexample embodiments.

FIG. 2A shows a detailed example of an On-Board Diagnostic (OBDII)connector. Here, a connector 202 has 16 pins or discrete electricalcontacts numbered consistent with the standards discussed above.Although some pins are unused, each of the pins used in a particularconnection provides access to a data bus within the vehicle, or providespower or a ground signal for a device connected to the car. Theconnector mounted to the car as shown in FIG. 1 is a female connectorhaving a socket designed to receive a pin at each location numbered inFIG. 2, while devices designed to plug in to the connector on the carare male connectors having pins at each numbered location. The OBDIIconnectors are designed such that a male connector can be easilyattached to a female connector by aligning the plastic connectorhousings and pushing the connectors together, and can be removed byfirmly pulling the connectors apart. The OBD connectors are heldtogether when assembled in some examples through use of a retentionelement 204 on the female OBDII connector, which is engaged by a springbiased member on the male OBDII connector. This makes attachment andremoval of various devices using OBDII connectors very straightforward,requiring little time or effort and no advance training or tools.

FIG. 2B shows a vehicle-mounted OBDII connector and a pluggable OBDIImodule. Here, the OBDII connector 206 is mounted to a vehicle, as shownat 102 of FIG. 1. The OBDII connector is a female connector, and ismounted to the vehicle using mounting flange 208. The OBDII connector206 also includes a standard retention element 210, which is operable toengage a spring-biased retention element on a male plug to ensure thatthe male plug doesn't easily become dislodged from the female connectormounted to the vehicle. Typically, the spring-biased retention elementon the male plug results in a force of several pounds being needed toseparate the male plug from the female OBDII connector 206.

An OBDII dongle 212 is also shown in FIG. 2B, which includes a lockingretention element 214. The OBDII dongle in this example is configured toplug into the OBDII connector 206 and to lock in place using securescrews that are part of locking retention element 214, which selectivelyengages the OBDII connector 206's retention element 210 after the OBDIIdongle 212 is plugged into OBDII connector 206 up to approximately line216. Because the locking retention element 214 is not spring-biased butinstead locks in place using secure screws or other such methods, theOBDII dongle 212 will be difficult to remove or tamper with except byapproved installers having proper tools and training. This reduces thelikelihood that the OBDII dongle 212 is removed by the user, such as anintoxicated vehicle owner trying to start a vehicle by tampering withelements of an intoxication interlock system. The locking retentionelement 214 in this example supplements the spring-biased retentionelement of at least part of the OBDII connection, but in other examplesa locking retention element such as 214 will engage or lock onto anotherpart of the OBDII connector 206, such as locking onto flange 208.

The OBDII dongle 212 in this example further includes a pass-throughconnector, shown at the top in FIG. 2B. This enables connecting anintoxication interlock system to the car via the OBDII dongle 212, whilealso providing a replacement OBDII port that is also coupled to thecar's OBDII port for diagnostics, data gathering, or other purposes. Inan alternate example, the OBDII dongle 212 does not provide areplacement OBDII port. In one such example, the OBDII dongle 212provides a “dummy” or non-functional OBDII connector that is notoperational, but that is designed to appear as though it is a standardOBDII interface to reduce the possibility of a user tampering with theOBDII dongle 212.

In some examples, the OBDII dongle 212 provides an alternate wired orwireless interface. In another such example, the OBDII dongle 212 has aclosed or sealed housing instead of a connection interface. In someembodiments, the OBDII dongle 212 derives power from the OBDII port,such as to power circuitry or communications elements within the OBDIIdongle. In some embodiments, the OBDII dongle 212 communicates with oneor more other elements of the intoxication interlock system through awired connection, or through a wireless connection such as Bluetooth,NFC, WiFi, or another suitable wireless protocol. This enables the OBDIIdongle to serve as an interface between the intoxication interlocksystem and the vehicle's control systems and networks, while providingsome degree of physical security or tamper resistance through thelocking retention element 214.

FIG. 3 shows an example intoxication interlock system coupled to avehicle. Here, vehicle electrical systems 302 are connected tointoxication interlock system components 304. A Bluetooth relay 306 isalso installed in the vehicle in place of a standard vehicle relay, aspart of the intoxication interlock system.

The vehicle subsystem 302 comprises an OBDII diagnostic connector 308,which is connected to the vehicle's electronic control unit or ECU 310.The ECU is connected to various electrical subsystems within the vehicleusing a bus such as a car area network bus or CANBUS, including bodycontrol module (BCM) 312 and engine control module (ECM) 314. The BCM iscoupled to electrical systems that are a part of the car's body and thatare not integral to operation of the engine or powertrain, such as theradio 316, the horn 318, and the hazard lights 320. The ECM is coupledto electrical systems that are associated with the vehicle's engine orpowertrain, such as the fuel pump 322, the ignition 324, and the starter326. In other examples, other modules such as a powertrain controlmodule (PCM) or the like will control various elements shown ascontrolled by the ECM or BCM in this example.

The vehicle-connected intoxication interlock system 304 includes acontrol module 328 and a detection unit 330, which are coupled to thevehicle through the vehicle's OBDII diagnostic connector 308. In thisexample, the control module 328 includes an OBDII interface tocommunicate with the vehicle, a processor 334 to execute programinstructions, and storage 336 to store program code used to implementvarious intoxication interlock functions. The control module alsoincludes a wireless Bluetooth communications module 338, a UniversalSerial Bus (USB) module 340, and an RS232 serial port 342. Although someexamples include more, fewer, or different communication modules thanthose shown at 338-342, the communication modules illustrated here arerepresentative of typical communication modules as may be used toimplement various examples.

The detection unit 330 includes a display 344 operable to display textor graphics to a user, and a fuel cell 346 or other detection elementoperable to detect the presence and/or level of an intoxicant. In a moredetailed example, a fuel cell operable to detect the level of ethanol ina user's breath is employed. The detection unit 330 is coupled to thecontrol module through connection 348, which in this example is a RS232serial connection, but in alternate embodiments is a Bluetooth wirelessconnection or other suitable connection. The detection unit in thisexample is a handheld device, such that a user may pick the unit up tofacilitate conducting a breath test using the fuel cell 364.

To install the intoxication interlock system 304 in the vehicle of FIG.2, the control module 328 is coupled to the vehicle's electrical systemby connecting the OBDII interface 332 of the control module to the OBDIIdiagnostic connector 308 of the vehicle (also shown as OBDII diagnosticconnector 102 of FIG. 1). This is achieved by simply connecting a cableextending from the control module to the vehicle's OBDII port in someembodiments. Other embodiments will use a wireless connection such as aBluetooth transceiver coupled to the vehicle's OBDII diagnosticconnector in communication with the Bluetooth module 338 of the controlmodule. This step of connecting the control module 328 to the OBDIIconnector 308 does not require the use of any tools and can be performedwith the installer's hands by pushing the cable extending form thecontrol module into the vehicle's OBDII port 308, or by pushing theBluetooth transceiver into the vehicle's OBDII port 308.

In a further example, the Bluetooth relay 306 is also installed in thevehicle, enabling the control module 328 to selectively allow operationof the Bluetooth relay 306. The Bluetooth relay 306 is installed byremoving one of the standard vehicle relays and replacing it with theBluetooth relay 306. In one example, this step does not require the useof any tools and can be performed with the installer's hands. Theinstaller identifies the appropriate standard relay for removal, pullsthe standard relay out of the vehicle, which leaves an unoccupied relayreceptacle, and the installer pushes the Bluetooth relay 306 into therelay receptacle of the vehicle. The Bluetooth relay in a furtherexample closely resembles the standard relay thereby discouragingtampering, and the control module records vehicle events that maysuggest the Bluetooth relay has been removed or replaced.

Installation of the intoxication interlock system of FIG. 3 is thereforesignificantly less difficult than installing a traditional intoxicationinterlock system in a vehicle, which typically requires several hours ofcutting holes in the firewall, cutting and splicing wires, and routingwiring from the control module to various electrical systems within thevehicle. The intoxication interlock system of FIG. 3 instead uses anetworked configuration, including use of a vehicle network such as anOBDII network to communicate with a vehicle's control systems, and useof a Bluetooth network to communicate with a replacement relay. Thisnetworked configuration makes use of wireless and wired networksincluding existing vehicle networks, thereby reducing reduces the costof installation of an intoxication interlock system and reducing damageto the vehicle into which such a system is installed.

In operation, the control module 328 derives power through the OBDIIdiagnostic connector, through batteries, or though both to power aprocessor 334 and other circuitry to perform basic intoxicationinterlock functions. The control module is connected to a detection unit330 that is operable to perform functions such as display a currentstatus or provide instructions to a user using display 344, and toreceive a breath sample for analysis using fuel cell 346 or another suchdetection element. The detection unit and control module are shown asseparate elements in the example of FIG. 3, but in other examples can beintegrated into the same physical unit, can be implemented in whole orin part using other devices such as a user's smartphone, and may includefewer or additional features from the example shown here.

To start a vehicle, a user typically turns the vehicle key to the runposition to power the vehicle systems and to power the control modulethrough the vehicle's OBDII diagnostic connector. When the controlmodule receives the power signal from the vehicle, it initiatescommunication with the vehicle and starts an intoxication interlockprocedure. The procedure in one example includes prompting a user viathe display 344 to blow a breath into fuel cell 346 that is sufficientlylong and has a sufficient volume of air to verify that the user is notintoxicated, such as having an ethanol level in breath that is lowerthan a preset threshold. If the user's breath passes the intoxicationtest, the control module signals the vehicle to enable the vehicle tostart, such as by enabling one or more vehicle systems that have beenpreviously disabled via the OBDII diagnostic connector, writing ormodifying at least a portion of previously altered firmware of a controlsystem within the vehicle to enable the vehicle to start, or signalingBluetooth relay 306 to enable the relay to operate normally.

If the user's breath does not pass the test, the control moduleselectively restricts operation of the vehicle. In one example, thecontrol module does not allow the vehicle to start, and records aviolation or a failed test. The control module prevents the vehicle fromstarting in one example by leaving the Bluetooth relay 306 in adeactivated mode or putting the Bluetooth relay 306 into a deactivatedmode such that it does not function as a normal relay. In anotherexample, the control module prevents the vehicle from starting bywriting or leaving a portion of firmware of one of the vehicle's controlsystems modified such that the vehicle is inoperable. In anotherexample, the control module prevents the vehicle from starting bydisabling a vehicle system such as the fuel pump, ignition, starter,etc. via the OBDII diagnostic connector.

Once the vehicle is in operation, the control module will occasionallyand randomly prompt a retest. A retest requires the driver to provideanother breath sample to the detection unit 330. Although officialdocumentation suggests that the retest be conducted after the driver haspulled off the road and stopped the vehicle, the Federal Registerrecognizes that 99% of retests are done while the vehicle remains innormal operation. When the driver is prompted to perform a retest, thedriver typically must perform the retest within a relatively short time,such as a minute or several minutes, or the control module 328 may takevarious actions to encourage the driver to complete the retest orrestrict operation of the motor vehicle.

In one such example, the control module 328 responds to a failed retestor a retest not completed in a timely manner by providing an indicationthat the retest has not been successfully completed, such as by honkingthe horn 318 or flashing the hazard lights 320. In a further example,the radio 316 is turned down to a minimal volume level or is turned offto make audible prompts to complete a retest more easily recognized. Inanother example, the controller responds to failure to complete a retestby restricting vehicle operation, such as by gradually reducing vehiclespeed to a governed speed that enables the driver to safely control andstop the vehicle.

The intoxication interlock system of FIG. 3 shows a system in which acontrol module 328 and a detection unit 330 that are either separateitems or are combined into a single unit may be structured. Otherexamples will use other configurations, such as incorporation ofadditional or legacy functions from preexisting intoxication interlocksystems which are designed to be installed by the preexisting methods ofcutting holes in the firewall, cutting and splicing wires, and routingwiring from the control module to various electrical systems within thevehicle. FIG. 4 shows an intoxication interlock system incorporating alegacy relay box, consistent with one such example.

Here, a control module 402 such as the control module of FIG. 3 iscoupled to the vehicle's OBDII diagnostic port 404, such as via a cableassembly or a wireless connection. The control module 402 is alsocoupled to a legacy relay box 406, which incorporates its own processor408, USB interface 410, RS232 serial interface 412, Global PositioningSystem or GPS 414, and cellular modem 416. The legacy relay box 406 iscoupled to the control module 402, providing the control module accessto a variety of external functions such as a camera 420, GPS locationinformation, cellular radio communication capability, and connection toa detection unit 418. These additional functions are already implementedin the legacy relay box 406, and may be used in some embodiments toprovide the intoxication interlock system with additional levels ofsecurity or verification.

For example, a USB port 410 and camera 420 enable the intoxicationinterlock system to record pictures or video of the person breathinginto the fuel cell to complete the breath test, to document if a personother than the driver is blowing into the fuel cell. This significantlyreduces the ability of a user who is required to use the intoxicationinterlock system to falsely appear to pass the test by having someoneelse complete the breath test, adding to the safety and security of theintoxication interlock system. Similarly, a GPS receiver 414 is operableto track the location of the legacy relay box 406, and therefore of thevehicle, enabling the control module to record the location of varioustests, and to perform other functions such as to detect if the vehicleis moving when a valid intoxication breath test has not been completed.

The control module 402 in the example of FIG. 4 is also able to use thecellular modem 416 to communicate with remote systems, such as to reportmovement of the vehicle, to report violations or attempts to defeat theintoxication interlock system, or to send test information such asphotos accompanying each intoxication test to a monitoring agency toensure that only the intended user is completing the breath intoxicationtests. In the example shown here, the GPS 414 and cellular modem 416 arealso coupled to one or more antennas, which may be integrated into thelegacy relay box or in other examples may be external to the relay box.

The Bluetooth relay in the examples of FIGS. 3 and 4 is in variousembodiments operable to replace a relay in a vehicle by simplyunplugging the original relay and inserting the Bluetooth relay in itsplace. In some examples, the Bluetooth relay is configured to have anappearance similar to the original relay such that a user is not temptedto remove or tinker with the relay, while in other examples theBluetooth relay will be identifiable as part of the intoxicationinterlock system, such as with a warning not to remove the relay. In afurther example, the control module is operable to detect and recordabnormal operation of the vehicle or Bluetooth relay, which may suggestthat the Bluetooth relay has been removed, replaced, or tampered with.

Although the Bluetooth relay of FIGS. 3 and 4 is wireless and thecontrol module connection to the vehicle's OBDII diagnostic connector iswired, either of these connections may be wired or wireless in variousembodiments. For example, a wire coupling the control module to therelay may be less convenient than a Bluetooth or other wirelessconnection, but is still significantly more convenient than cutting andsplicing wires on a customer's vehicle. Similarly, added convenience maybe obtained by using a wireless transceiver dongle or connector coupledto the OBDII diagnostic connector of the vehicle, which wirelesslycommunicates with the control module. In an alternate example, theconnection between the control module and the detection unit iswireless, such that the control module may be hidden under the dash orotherwise concealed. This may help prevent tampering in installationswhere only the detection unit is exposed in the vehicle for customerinteraction. In some such examples, the detection unit may be batterypowered, powered using a cigarette lighter or USB port, or integratedinto another powered device such as a smartphone.

FIG. 5A shows an example of a more detailed Bluetooth relay. Here, theBluetooth relay 502 includes a Bluetooth radio transceiver 504, acontroller or central processing unit (CPU) 506, and a power module 508.The term “Bluetooth” is used herein to indicate that a component iscapable of communicating according to a standard for wireless exchangeof data over short distances, such as by using short-wavelength UHFradio waves in the ISM band from 2.4-2.485 Gigahertz. Standards forBluetooth communication are managed by the Bluetooth Special InterestGroup. The relay CPU and power module are connected to traditional relayelements including a relay actuation coil 510 and a switch 512 that iscontrolled by the relay actuation coil. In operation, the power module508 derives power for the relay's CPU and Bluetooth elements fromexternal pin connections to the relay actuation coil and the switch,such as by drawing power from a control signal applied across the relayactuation coil when the coil is energized, or drawing power from acrossthe switch when the switch is open. Because the Bluetooth relay requiresvery little power to operate the CPU 506 and the Bluetooth transceiver504, the amount of power drawn does not interfere with control signalsprovided to the relay's actuation coil or with a switched elementconnected to the relay's switch.

This enables the Bluetooth relay 502 to communicate with externaldevices such as the control modules of FIGS. 3 and 4 using Bluetoothradio communication, and to selectively control whether a control signalreceived in the relay actuation coil 510 will result in actuating theswitch 512. This is done in some embodiments by selectively breaking theexternal pin connections to the coil 510, such as with a transistor orother device controlled by the relay CPU 506. The Bluetooth relay'scontroller can therefore activate or deactivate the Bluetooth relay inresponse to receive Bluetooth signals, making operation of the Bluetoothrelay selectively controllable from a device such as the control moduleof FIGS. 3 and 4. Although the relay is used in the examples presentedhere to restrict operation of the vehicle under the control of thecontrol module to enforce an intoxication interlock function, the relayshown can be employed in further examples as part of a car securitysystem to prevent auto theft, or as part of a seller payment assurancesystem operable to permit a seller to remotely disable the vehicle ifthe user does not make payments for the vehicle in other examples.

FIG. 5B shows a more detailed example of a Bluetooth relay. Here, therelay actuation coil is coupled between coil contacts A and B, and theswitch is coupled between contacts C and D. An actual physical microrelay 514 is incorporated into the Bluetooth relay 502 and includes theactuation coil and switch. Bridge rectifiers BR1 and BR2 serve to derivepower from the coil connections A and B when the coil is energized, andfrom switch contacts C and D when the switch is open. Bridge rectifierBR3 energizes the coil of micro relay 514 in response to receiving anenergizing signal on coil connections A and B, under the control ofmicrocontroller and Bluetooth receiver 516.

The microcontroller and Bluetooth receiver shown at 516 are powered bythe output from bridge rectifiers BR1 and BR2, using a power signalregulated by voltage regulator 518. The power is derived via both bridgerectifiers BR1 and BR2 in this example so that when the normally-openrelay is not energized, power can be derived from across the opencontact connections C and D coupled to the switch. When the relay isenergized, the voltage across the now-closed switch will be near zero,and power will instead be derived from across the coil contacts A and B.The rectifiers further allow installation of the relay in relay socketsusing different pin configurations, as power applied to any of the pinscan be used to power the relay.

FIG. 5C illustrates an alternate embodiment of a Bluetooth relay, inwhich diodes are used in place of bridge rectifiers. Here, diodes 520,522, and 524 can be employed as polarity protection in place ofrectifiers because the polarity of signals applied to the relay contactswhen correctly installed is known, and the diodes are only used toprotect against damage from installation in a reversed physicalconfiguration or in an incompatible vehicle. In another example, therelay will use means other than a bridge rectifier or diodes to manageunknown contact polarity, such as a transistorized circuit that switchesthe contact signal applied to the voltage regulation circuit 518dependent on the relative voltage detected between two or more of thecontacts.

In a further example, voltage regulation and polarity detection circuit526 is operable to indicate when the relay is properly plugged in andpowered, such as by illuminating or flashing a light-emitting diode(LED) for a brief period of time to indicate to an installer that therelay is correctly installed and powered. An installer who does not seethe LED flash can therefore easily see that the relay is not installedcorrectly, and can reconfigure the relay in the relay socket or tryanother relay as needed. Because it is desirable in some applicationsnot to draw attention to the relay once installed for security purposes,in one example the indicator LED or other indication such as a buzzerwill only alert for a brief period during the installation process, andthen will be turned off during normal operation. The LED or otherindication may also be obscured in some examples to further disguise itspresence, such as by shielding it behind a semi-opaque orsemi-transparent cover. The relays shown in FIG. 5 incorporateelectrically-controlled electromagnetic switching elements, but therelay in other examples includes solid-state relays or other suitabledevices. The term “relay” as used herein includes anyelectrically-controlled switching devices or circuits operable toselectively change the state of the switching device or circuit using anelectrical control signal.

The relays of FIGS. 5A, 5B, and 5C are in some embodiments operable toboth receive and send information, such as to receive signals indicatingan active or inactive state for the relay, and to report their presenceor state to another device such as a control module. In a more detailedexample, the Bluetooth relay is in a disabled state when initiallypowered on, such as by a user turning an ignition key on. The relayestablishes communication with the control module, thereby confirmingits presence to the control module, and awaits a signal to enable therelay function. When the control module has determined that the user isnot intoxicated, it signals the Bluetooth relay to enable itself, makingthe car operable.

The control module can further send a code to the relay causing therelay to disable normal relay operation, such as when a user fails aretest while driving by providing a breath having an alcohol level thatexceeds an acceptable threshold. In such circumstances, the Bluetoothrelay receives a disable code from the control module and disables thevehicle, which in a further example may occur after some brief period ofthe control module enforcing limited operation such as reduced speed orfuel delivery that enables the driver to safely pull the vehicle out oftraffic. In a further example, the control module will activate thevehicle's hazard lights, horn, or other indicators to warn other driversthat the vehicle is being stopped as a result of an intoxicated driver.

The control module of FIGS. 3 and 4 is presented as a microprocessoroperable to perform various functions, with various communicationcapabilities to connect with the vehicle, with a cellular monitoringsystem, with a camera, and the like. In some embodiments, the controlmodule will be embodied in part or in whole by a smartphone or otherportable handheld device. The term smartphone is used to indicate amobile phone with an advanced mobile operating system so that somefunctionalities of a personal computer are provided.

FIG. 6 shows a smartphone configured to function as a control module foran intoxication interlock system, consistent with an example. Here, thesmartphone 602 is coupled to a fuel cell 604 or other device operable todetect intoxication in a user's breath, such as by connecting to thesmartphone's USB port, charging port, Lightning connector available fromApple Inc. for Apple mobile devices, or other suitable connection. Thesmartphone comprises a processor 606, and storage 608 which storesapplication software 610, referred to hereinafter as an app 610, that isoperable to perform at least some functions of the intoxicationinterlock system. The app 610 is able to take advantage of otherfeatures common to a smartphone, such as the phone's Bluetooth radio612, cellular radio or wide-area network (WAN) 614, global positioningsystem or GPS 616, camera 618, and accelerometer 620.

As with the examples of FIGS. 3 and 4, the Bluetooth radio 612 can beused to communicate with a Bluetooth relay, with a OBDII wirelessinterface such as the OBDII dongle 212 of FIG. 2B, or with othercomponents of the intoxication interlock system. The cellular or WANconnection 614 may again be used to communicate information from thecontroller to a remote monitor or remote server, such as to transmitviolation records or images of users while taking intoxication tests toverify identity. Similarly the GPS 616 may be used to verify or trackthe location of the vehicle, and may further be used in conjunction withor as an option to accelerometer 620 to ensure that the vehicle is notmoving until a valid intoxication interlock test has been completed.Camera 618 can capture images of the person taking an intoxication test,such that the images are recorded or are transmitted such as via thecellular radio to monitor that the correct person is taking theintoxication tests.

Although the intoxication interlock systems of FIGS. 3, 4, and 6 haveaddressed restricting operation of a vehicle when a user is intoxicated,the intoxication interlock system in further examples is operable toperform one or more additional functions, such as detecting impairmentor intoxication as a result of a substance other than alcohol. In othersuch examples, the system is operable to function as an automotivesecurity system operable to prevent theft of the vehicle, or as a sellerpayment assurance system operable to permit a seller to remotely disablethe vehicle if the user does not make payments for the vehicle. Inanother example, the system is operable to detect when someone issending a text message while driving, or performing another restrictedaction using electronics within the car. The system in other exampleswill be able to limit the geographic range in which the driver canoperate the vehicle, such as permitting a user to drive only to work andback or within the driver's neighborhood. In another example, the systemwill function to restrict other vehicle operation parameters such asspeed or time-of-day of vehicle operation.

FIG. 7 is a flowchart illustrating an example method of operating anintoxication interlock system. At the start, the vehicle is in adisabled or inactive state. The process of enabling the vehicle startsby the intoxication interlock system prompting the user to blow into theintoxication interlock system's detection element at 702, and thedetection element detects the level of an intoxicant such as alcohol inthe user's breath at 704. The system then compares the detectedintoxicant level to an allowable threshold at 706, and determineswhether the intoxicant level exceeds the threshold.

If the threshold is exceeded at 706, the vehicle is brought to adisabled state if it is not already disabled at 708, such as bywirelessly controlling a Bluetooth relay to bring an automotive systemcoupled to the relay to an inoperative state. By making an automotivesystem such as the starter, the fuel pump, or the ignition inoperable,the vehicle will not start or run. In another example, the intoxicationinterlock system interrupts a vehicle bus such as the On-BoardDiagnostic (OBDII) bus, car-area network bus (CANBUS), or other vehiclebus by disrupting the bus to prevent operation of the vehicle. In onesuch example, the intoxication interlock system shorts the data busthrough its connection to the vehicle's OBDII diagnostic connector,thereby preventing communication on the bus. In another example, theintoxication interlock system injects noise or other signals onto thebus that prevent normal operation of the bus. The intoxication violationis then recorded at 710, such as by storing a record of the violation inthe intoxication interlock system or reporting the violation to amonitoring agency or authority.

A vehicle bus such as the OBDII bus or CANBUS is used to restrictoperation of the vehicle in another example by sending instructions fromthe intoxication interlock system to one or more car components, such asthe fuel pump, starter relay, or ignition. By selectively instructingone or more vehicle systems or components such as these not to operate,the intoxication interlock system is able to selectively restrictoperation of the vehicle. In a further example, the intoxicationinterlock system instructs one or more systems to operate to selectivelyprevent operation of the vehicle, such as activating a parking brake,vehicle security system, or other component that can restrict operationof the vehicle.

If the threshold is not exceeded at 706, the intoxication interlocksystem wirelessly controls the Bluetooth relay to enable the coupledautomotive system at 712. In alternate or further embodiments, theintoxication interlock system rewrites at least a portion of vehiclefirmware at 714 that has been previously modified to make the firmwareoperable to control normal vehicle operation, or performs anotherfunction enabling some element of the vehicle.

Once normal operation of the vehicle has been enabled as a result ofsuccessful completion of an intoxication interlock test, theintoxication interlock system randomly re-tests or re-verifies theuser's sobriety at 716. This safeguards against using a sober friend topass a test before an intoxicated user begins driving, except where thesober friend is also a passenger in the vehicle. If the user performsthe re-verification test at 718, the intoxication interlock process isrepeated at 702, except that the current state of the vehicle when thetest starts will be an enabled or operable state. If the user does notperform the re-verification test at 718 when prompted, the intoxicationinterlock system provides an audible and/or visible notification thatthe re-verification test is overdue at 720, such as by honking thevehicle's horn and turning down the radio, or flashing the hazard lightsof the vehicle. If the re-verification test is still not performed in atimely manner, failure to complete the re-verification test is recordedas a violation at 710, and in a further example is reported to amonitoring agency or authority.

These examples show how an intoxication interlock system incorporatingfeatures such as a Bluetooth relay or an OBDII diagnostic port interfacemay operate to selectively restrict operation of a vehicle, depending onthe result of an intoxication test. The systems and methods presentedhere may be implemented in part using a computerized device, such as asmartphone, handheld, or other computerized device.

FIG. 8 shows a computerized intoxication interlock system or componentof a computerized intoxication interlock system, consistent with variousexamples described herein. FIG. 8 illustrates only one particularexample of computing device 800, and other computing devices 800 may beused in other embodiments. Although computing device 800 is shown as astandalone computing device, computing device 800 may be any componentor system that includes one or more processors or another suitablecomputing environment for executing software instructions in otherexamples, and need not include all of the elements shown here. A controlmodule, relay box and detection unit as described herein are examples ofcomponents that can be implemented using computing devices such ascomputing device 800.

As shown in the specific example of FIG. 8, computing device 800includes one or more processors 802, memory 804, one or more inputdevices 806, one or more output devices 808, one or more communicationmodules 810, and one or more storage devices 812. Computing device 800,in one example, further includes an operating system 816 executable bycomputing device 800. The operating system includes in various examplesservices such as a network service 818. One or more applications, suchas an intoxication interlock application 820 are also stored on storagedevice 812, and are executable by computing device 800.

Each of components 802, 804, 806, 808, 810, and 812 may beinterconnected (physically, communicatively, and/or operatively) forinter-component communications, such as via one or more communicationschannels 814. In some examples, communication channels 814 include asystem bus, network connection, inter-processor communication network,or any other channel for communicating data. Applications such asintoxication interlock application 820 and operating system 816 may alsocommunicate information with one another as well as with othercomponents in computing device 800.

Processors 802, in one example, are configured to implementfunctionality and/or process instructions for execution within computingdevice 800. For example, processors 802 may be capable of processinginstructions stored in storage device 812 or memory 804. Examples ofprocessors 802 include any one or more of a microprocessor, acontroller, a digital signal processor (DSP), an application specificintegrated circuit (ASIC), a field-programmable gate array (FPGA), orsimilar discrete or integrated logic circuitry.

One or more storage devices 812 may be configured to store informationwithin computing device 800 during operation. Storage device 812, insome examples, is known as a computer-readable storage medium. In someexamples, storage device 812 comprises temporary memory, meaning that aprimary purpose of storage device 812 is not long-term storage. Storagedevice 812 in some examples includes a volatile memory, meaning thatstorage device 812 does not maintain stored contents when computingdevice 800 is turned off. In other examples, data is loaded from storagedevice 812 into memory 804 during operation. Examples of volatilememories include random access memories (RAM), dynamic random accessmemories (DRAM), static random access memories (SRAM), and other formsof volatile memories known in the art. In some examples, storage device812 is used to store program instructions for execution by processors802. Storage device 812 and memory 804, in various examples, are used bysoftware or applications running on computing device 800 such asintoxication interlock application 820 to temporarily store informationduring program execution.

Storage device 812, in some examples, includes one or morecomputer-readable storage media that may be configured to store largeramounts of information than volatile memory. Storage device 812 mayfurther be configured for long-term storage of information. In someexamples, storage devices 812 include non-volatile storage elements.Examples of such non-volatile storage elements include magnetic harddiscs, optical discs, floppy discs, flash memories, or forms ofelectrically programmable memories (EPROM) or electrically erasable andprogrammable (EEPROM) memories.

Computing device 800, in some examples, also includes one or morecommunication modules 810. Computing device 800 in one example usescommunication module 810 to communicate with external devices via one ormore networks, such as one or more wireless networks. Communicationmodule 810 may be a network interface card, such as an Ethernet card, anoptical transceiver, a radio frequency transceiver, or any other type ofdevice that can send and/or receive information. Other examples of suchnetwork interfaces include Bluetooth, 3G or 4G, WiFi radios, andNear-Field Communications (NFC), and Universal Serial Bus (USB). In someexamples, computing device 800 uses communication module 810 towirelessly communicate with an external device such as via publicnetwork such as the Internet.

Computing device 800 also includes in one example one or more inputdevices 806. Input device 806, in some examples, is configured toreceive input from a user through tactile, audio, or video input.Examples of input device 806 include a touchscreen display, a mouse, akeyboard, a voice responsive system, video camera, microphone or anyother type of device for detecting input from a user.

One or more output devices 808 may also be included in computing device800. Output device 808, in some examples, is configured to provideoutput to a user using tactile, audio, or video stimuli. Output device808, in one example, includes a display, a sound card, a video graphicsadapter card, or any other type of device for converting a signal intoan appropriate form understandable to humans or machines. Additionalexamples of output device 808 include a speaker, a light-emitting diode(LED) display, a liquid crystal display (LCD), or any other type ofdevice that can generate output to a user.

Computing device 800 may include operating system 816. Operating system816, in some examples, controls the operation of components of computingdevice 800, and provides an interface from various applications suchintoxication interlock application 820 to components of computing device800. For example, operating system 816, in one example, facilitates thecommunication of various applications such as intoxication interlockapplication 820 with processors 802, communication unit 810, storagedevice 812, input device 806, and output device 808. Applications suchas intoxication interlock application 820 may include programinstructions and/or data that are executable by computing device 800. Asone example, intoxication interlock application 820 may includeinstructions that cause computing device 800 to perform one or more ofthe operations and actions described in the examples presented herein.

Although specific embodiments have been illustrated and describedherein, any arrangement that achieve the same purpose, structure, orfunction may be substituted for the specific embodiments shown. Thisapplication is intended to cover any adaptations or variations of theexample embodiments of the invention described herein. These and otherembodiments are within the scope of the following claims and theirequivalents.

The invention claimed is:
 1. A vehicle immobilization system,comprising: a detection unit comprising: a detection unit housingconfigured to be picked up and hand held by a user, a fuel cell withinthe detection unit housing, wherein the fuel cell is operable to detecta presence of and a level of ethanol in a breath of the user, a displayoperable to display text to the user, a processor of the detection unitwithin the detection unit housing, the processor coupled to the display,and a memory of the detection unit within the detection unit housing,the memory coupled to the processor of the detection unit, wherein thedetection unit is operable to send, via a serial connection, a signalrelated to the level of ethanol in the breath of the user; a controlmodule operable to receive the signal related to the level of ethanol inthe breath of the user from the detection unit and to selectivelyrestrict operation of a vehicle by restricting operation of a starter ofthe vehicle based on the level of ethanol in the breath of the userexceeding a threshold, the control module comprising: a processor of thecontrol module operable to: receive the signal related to the level ofethanol in the breath of the user from the detection unit, based on thesignal, selectively restrict the operation of the vehicle by restrictingthe operation of the starter of the vehicle based on the level ofethanol in the breath of the user exceeding the threshold; and based onthe signal, selectively allow the operation of the vehicle by allowingthe operation of the starter of the vehicle based on the level ofethanol in the breath of the user not exceeding the threshold; a memoryof the control module connected to the processor of the control moduleand storing instructions for the processor of the control module toselectively restrict the operation of the vehicle by restricting theoperation of the starter of the vehicle based on the level of ethanol inthe breath of the user exceeding the threshold and selectively allow theoperation of the vehicle by allowing the operation of the starter of thevehicle based on the level of ethanol in the breath of the user notexceeding the threshold; wherein the control module is configured to behidden under a dashboard in the vehicle and the detection unit isconfigured to be exposed for user interaction; wherein the controlmodule is physically separate from the detection unit housing and isconnected to the detection unit via the serial connection; acommunication module physically separate from and external to thecontrol module, the communication module comprising: a globalpositioning system (GPS) receiver, a cellular modem configured to sendan intoxication test result associated with the level of ethanol in thebreath of the user, a processor of the communication module connected tothe GPS receiver and the cellular modem, and a memory of thecommunication module connected to the processor of the communicationmodule, wherein the communication module is coupled to the controlmodule via a serial connection; wherein the GPS receiver and thecellular modem are coupled to a plurality of antennas integrated intothe communication module; and a camera external to the control module,the communication module, and the detection unit, the camera configuredto connect to a USB interface, the camera comprising a cable connectionto the vehicle immobilization system, wherein the camera is configuredto record a picture of the user using the detection unit.
 2. The systemof claim 1, wherein the control module is configured to record aviolation if the breath of the user exceeds the threshold.
 3. The systemof claim 1, wherein the system is configured to send, using the cellularmodem, the picture captured by the camera with the intoxication testresult.
 4. The system of claim 1, wherein the cellular modem isconfigured to report a movement of the vehicle.
 5. The system of claim1, wherein the cellular modem is configured to report an attempt todefeat the vehicle immobilization system.
 6. The system of claim 1,wherein the system is configured to use the GPS receiver to detect ifthe vehicle is moving without a valid intoxication test result.
 7. Thesystem of claim 1, further comprising an accelerometer, wherein thesystem is configured to use the accelerometer to detect if the vehicleis moved without a valid intoxication test result.
 8. The system ofclaim 1, wherein the cellular modem is configured to report informationto a monitoring authority.
 9. A method of selectively immobilizing avehicle using a vehicle immobilization system based on a level ofethanol in a breath of a user, comprising: detecting the level ofethanol in the breath of the user using a detection unit, the detectionunit comprising: a detection unit housing configured to be picked up andhand held by the user, a fuel cell within the detection unit housing,wherein the fuel cell is operable to detect a presence of and a level ofethanol in a breath of the user, a display operable to display text tothe user, a processor of the detection unit within the detection unithousing, the processor coupled to the display, and a memory of thedetection unit within the detection unit housing, the processor coupledto the processor of the detection unit, determining whether the level ofethanol in the breath of the user exceeds a threshold, sending, via aserial connection, a signal related to the level of ethanol in thebreath of the user from the detection unit to a control module; based onthe signal related to the level of ethanol in the breath of the userfrom the detection unit, the control module selectively restrictingoperation of a vehicle by restricting operation of a starter of thevehicle based on the level of ethanol in the breath of the userexceeding the threshold, the control module comprising: a processor ofthe control module operable to: receive the signal related to the levelof ethanol in the breath of the user from the detection unit, based onthe signal, selectively restrict the operation of the vehicle byrestricting the operation of the starter of the vehicle based on thelevel of ethanol in the breath of the user exceeding the threshold; andbased on the signal, selectively allow the operation of the vehicle byallowing the operation of the starter of the vehicle based on the levelof ethanol in the breath of the user not exceeding the threshold; amemory of the control module connected to the processor of the controlmodule and storing instructions for the processor of the control moduleto selectively restrict the operation of the vehicle by restricting theoperation of the starter of the vehicle based on the level of ethanol inthe breath of the user exceeding the threshold and selectively allow theoperation of the vehicle by allowing the operation of the starter of thevehicle based on the level of ethanol in the breath of the user notexceeding the threshold; wherein the control module is configured to behidden under a dashboard in the vehicle and the detection unit isconfigured to be exposed for user interaction; wherein the controlmodule is physically separate from the detection unit housing and isconnected to the detection unit via the serial connection; sending anintoxication test result by a communication module physically separatefrom and external to the control module, the communication modulecomprising: a global positioning system (GPS) receiver, a cellular modemconfigured to send an intoxication test result associated with the levelof ethanol in the breath of the user, a processor of the communicationmodule connected to the GPS receiver and the cellular modem, and amemory of the communication module connected to the processor of thecommunication module, wherein the communication module is coupled to thecontrol module via a serial connector of the communication module;wherein the GPS receiver and the cellular modem are coupled to aplurality of antennas integrated into the communication module; andrecording, via a camera, a picture of the user using the detection unit,wherein the camera is external to the control module, the communicationmodule, and the detection unit, wherein the camera configured to connectto a USB interface, the camera comprising a cable connection to thevehicle immobilization system.
 10. The method of claim 9, furthercomprising recording, using information from the GPS receiver, alocation of the intoxication test.
 11. The method of claim 9, furthercomprising reporting, using the cellular modem, attempts to defeat thesystem.
 12. The method of claim 9, further comprising: after allowingthe operation of the vehicle by allowing the operation of the starter ofthe vehicle based on the level of ethanol in the breath of the user notexceeding the threshold, administer a re-test by prompting the user fora second breath of the user; and based on the signal, selectively recorda violation based on the level of ethanol in the breath of the userexceeding the threshold.
 13. The method of claim 9, further comprisingthe control module recording a violation if the breath of the userexceeds the threshold.
 14. The method of claim 9, further comprisingsending, using the cellular modem, the picture captured by the camerawith the intoxication test result.
 15. The method of claim 9, furthercomprising reporting, using the cellular modem, a movement of thevehicle.
 16. A method of installing a vehicle immobilization system in avehicle, comprising: installing a control module in a location hiddenunder a dashboard in a vehicle, wherein the control module is operableto selectively restrict operation of the vehicle by restrictingoperation of a starter of the vehicle, based on a level of ethanol in abreath of a user exceeding a threshold, the control module comprising: aprocessor of the control module operable to: receive a signal related tothe level of ethanol in the breath of the user from the detection unit,based on the signal, selectively restrict the operation of the vehicleby restricting the operation of the starter of the vehicle based on thelevel of ethanol in the breath of the user exceeding the threshold; andbased on the signal, selectively allow the operation of the vehicle byallowing the operation of the starter of the vehicle based on the levelof ethanol in the breath of the user not exceeding the threshold; amemory of the control module connected to the processor of the controlmodule and storing instructions for the processor of the control moduleto selectively restrict the operation of the vehicle by restricting theoperation of the starter of the vehicle based on the level of ethanol inthe breath of the user exceeding the threshold and selectively allow theoperation of the vehicle by allowing the operation of the starter of thevehicle based on the level of ethanol in the breath of the user notexceeding the threshold; connecting the control module to a detectionunit via a serial connection so that the detection unit is exposed foruser interaction in the vehicle, wherein the detection unit comprises: adetection unit housing physically separate from the control module, thedetection unit housing configured to be picked up and hand held by theuser, a fuel cell within the detection unit housing and operable todetect a presence of and the level of ethanol in the breath of the user,a display operable to display text to the user, a processor of thedetection unit coupled to the display, a memory module of the detectionunit coupled to the processor of the detection unit, and wherein thedetection unit is operable to send, to the control module and via theserial connection, the signal related to the level of ethanol in thebreath of the user; connecting a communication module to the controlmodule via a serial connector of the communication module, wherein thecommunication module is physically separate from and external to thecontrol module, the communication module comprising: a globalpositioning system (GPS) receiver, a cellular modem configured to sendan intoxication test result associated with the level of ethanol in thebreath of the user, a processor of the communication module connected tothe GPS receiver and the cellular modem, and a memory of thecommunication module connected to the processor of the communicationmodule, wherein the GPS receiver and the cellular modem are coupled to aplurality of antennas integrated into the communication module; andconnecting a camera to the vehicle immobilization system using a cableconnection, wherein the camera is external to the control module, thecommunication module, and the detection unit, wherein the camera isconfigured to connect to a USB interface, wherein the camera isconfigured to record a picture of the user using the detection unit. 17.The method of claim 16, wherein the control module is configured torecord a violation if the breath of the user exceeds the threshold. 18.The method of claim 16, wherein the control module is configured tosend, using the cellular modem, the picture captured by the camera withthe intoxication test result.
 19. The method of claim 16, wherein thecellular modem is configured to report a movement of the vehicle. 20.The method of claim 16, wherein the cellular modem is configured toreport an attempt to defeat the vehicle immobilization system.